AI Governance

AI governance NZ

Give your teams the confidence to use AI safely and at scale.

Changeable provides AI governance NZ organisations can apply through practical day-to-day rules, approval pathways and human controls, so people know what they can use, what needs review and who remains accountable.

Clear acceptable use
Human accountability
Practical risk controls
New Zealand context
AI Governance Control Centre
Use case review Customer response assistant
Review complete
Business purpose Draft consistent customer responses

Supports service staff. No autonomous sending or final decision-making.

Risk level
Medium
Controls required
Required controls 4 active
Approved AI environmentOnly authorised tools and accounts
Active
Protected informationNo sensitive personal data entered
Active
Human review requiredStaff validate every response
Active
Decision record retainedUse and approval are documented
Active
Governance decision Approved with controls
Human owner
Service Operations
Accountability confirmed A named human remains responsible for every AI-assisted outcome.
The problem

AI governance is not about slowing down. It is about moving safely.

Without governance, AI adoption becomes inconsistent, hard to trust and difficult to scale. People experiment in different ways, use different tools, expose different risks and make decisions without a shared standard. Practical controls should also reflect guidance from the Office of the Privacy Commissioner.

Good governance works best when it supports a clear AI strategy. It gives teams enough structure to act with confidence and helps the organisation define what is allowed, what needs review, what must be protected and where human judgement remains essential.

Uncontrolled tool use

Teams may use public or unapproved tools with sensitive data, unclear ownership or no review process, especially where AI agents and assistants are introduced without clear boundaries.

Unclear accountability

AI-generated outputs can influence decisions without clear responsibility for quality, accuracy or final judgement.

Poor data and privacy controls

Information can be shared, processed or reused in ways that create privacy, confidentiality or trust risks.

New Zealand context

AI governance NZ organisations can align with local expectations

For New Zealand organisations, governance is not just an internal policy exercise. It should consider privacy, transparency, public trust, human accountability, data handling, stakeholder expectations and the way AI is used in real workflows. The New Zealand Government digital guidance provides useful context for responsible public-sector adoption.

Privacy and information handling

Define what information can be used, where it can be entered, who can access it and what must stay protected under the Privacy Act 2020 and relevant internal obligations.

Human review and accountability

Clarify when AI can assist, when humans must review, and who remains responsible for final decisions, including where AI affects employment, service or operational outcomes.

How we build your AI governance framework

A practical governance method that connects risk, policy, workflows, people, data and day-to-day AI use.

Phase 01

Governance assessment

Understand current AI use, risk exposure, decision contexts and organisational readiness, including links to AI readiness, data handling and process maturity.

  • Current AI usage review
  • Risk and control gap analysis
  • Data and privacy considerations
  • Stakeholder and workflow context
Phase 02

Framework design

Create a practical framework that defines how AI should be used, managed and reviewed.

  • Acceptable use principles aligned to recognised AI management standards where appropriate
  • Roles and responsibilities
  • Risk levels and approval pathways
  • Governance operating model
Phase 03

Policy and standards

Translate governance into usable guidance, controls and standards for teams.

  • AI policy guidance
  • Tool and data use rules
  • Human review requirements for AI-assisted and AI-automated workflows
  • Quality and documentation standards
Phase 04

Implementation and adoption

Support practical rollout so governance helps people work better, not just comply.

  • Team guidance and training
  • Use case review process
  • Monitoring and improvement
  • Leadership decision support

What you receive

The output is designed to make AI use clearer, safer and easier to manage across real teams and workflows.

AI governance framework

A practical framework that defines principles, responsibilities, risk levels, review points and operating expectations, supporting safe delivery across your wider AI strategy and automation priorities.

Acceptable use and policy guidance

Clear guidance on how staff can use AI, what information can be used and what requires approval or review, including support for generative AI use.

Risk and control model

A structured view of AI risks, required controls, escalation points and safeguards for higher-risk use cases.

Human review and accountability model

Defined points where human judgement, review, sign-off and accountability must remain in place.

Implementation roadmap

Practical next steps for embedding governance into workflows, training, leadership oversight and continuous improvement.

Who this is for

AI governance for organisations that need confidence before scale.

This service is designed for organisations that want AI adoption to be useful, safe, transparent and manageable across teams.

Councils and local government

For teams that need to manage public trust, information handling, transparency and accountable decision-making, including alignment with New Zealand Government digital guidance.

Public sector and funded organisations

For organisations operating with higher expectations around governance, reporting, stakeholder trust and oversight, where Privacy Act obligations and public accountability are part of the operating environment.

Businesses adopting AI across teams

For organisations where AI use is spreading and leaders need consistent rules, training, controls and review pathways.

Professional services and knowledge teams

For teams using AI to support research, documentation, advice, analysis or client-facing work where accuracy and trust matter, including teams adopting generative AI in day-to-day delivery.

Questions

Have a question about AI Governance?

Common questions before organisations commit to formalising AI rules, controls and adoption practices.

What is AI governance?

AI governance is the structure an organisation uses to decide how AI should be used, what risks need to be managed, who is accountable and what controls are required. It should sit alongside AI strategy, data governance and operational risk controls.

Does governance slow AI adoption down?

Good governance should make adoption easier. It gives people clearer boundaries, safer pathways and more confidence to use AI appropriately.

Do we need governance if we are only experimenting?

Yes, even early experimentation benefits from basic rules about data use, tool choice, privacy, human review and output quality.

Can this include policies and staff guidance?

Yes. The engagement can include governance frameworks, acceptable use guidance, policy content, review pathways and practical adoption support, including practical links to Fractional AI advisory support where ongoing guidance is needed.

What if we already have AI tools in use?

The work can start by reviewing current use, identifying risk gaps and building a governance model around the reality of how AI is already being used.

Ready to use AI with more confidence and control?

Start with a use case-led conversation. We will help you clarify what needs governance, what can move quickly and what should be controlled before it scales. You can also start with a Decision Clarity Session if you need help deciding the right next step.